fdio.infra.ansible/roles/vault/templates/vault_systemd.service.j2

   1 [Unit]
   2 Description=Vault
   3 Documentation=https://www.vaultproject.io/docs/
   4 Requires=network-online.target
   5 After=network-online.target
   6
   7 [Service]
   8 User={{ vault_user }}
   9 Group={{ vault_group }}
  10 ProtectSystem=full
  11 ProtectHome=read-only
  12 PrivateTmp=yes
  13 PrivateDevices=yes
  14 NoNewPrivileges=yes
  15 ExecReload=/bin/kill -HUP $MAINPID
  16 ExecStart={{ vault_bin_dir }}/vault {{ vault_node_role }} -config={{ vault_config_dir }}
  17 KillMode=process
  18 KillSignal=SIGINT
  19 Restart=on-failure
  20 RestartSec=5
  21 TimeoutStopSec=30
  22 StartLimitInterval=60
  23 StartLimitBurst=3
  24 LimitNOFILE=524288
  25 LimitNPROC=524288
  26 LimitMEMLOCK=infinity
  27 LimitCORE=0
  28
  29 [Install]
  30 WantedBy=multi-user.target